CVE-2008-6726

Multiple directory traversal vulnerabilities in CMScout 2.06, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bit parameter to (1) admin.php and (2) index.php, different vectors than CVE-2008-3415.

Link	Resource
http://osvdb.org/51119	Exploit
http://www.securityfocus.com/bid/33068	Exploit
http://www.cmscout.co.za/index.php?page=news&id=30	Patch Vendor Advisory
http://osvdb.org/51120
http://secunia.com/advisories/33375	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/47660
https://www.exploit-db.com/exploits/7625

Configuration 1

cpe:2.3:a:cmscout:cmscout:2.06:*:*:*:*:*:*:*

---

Published : 2009-04-17 02:08

Updated : 2017-09-29 01:33

---

NVD link : CVE-2008-6726

Mitre link : CVE-2008-6726

Cmscout

CWE-22